US20070130469A1 - Use of global clock to secure and synchronize messages in XM and SMS messages to a vehicle - Google Patents

Abstract

A system and method for providing secure one-way transmissions in a vehicle wireless communications system. The system and method rely on a clock signal to assure that the vehicle and server receive proper messages. The vehicle and the server will periodically synchronize their internal clocks to a global clock signal. The server will add its local time to the body of a message including a vehicle identification number and a function code. The server will then encrypt the message and transmit it to the vehicle. The vehicle will decrypt the message and compare the transmitted vehicle identification number with its identification number. If the identification numbers match, the vehicle will then see if the time in the message is within a predefined window of the vehicle time. If the transmitted time is within the predefined window of the vehicle time, the vehicle will accept the message and perform the function.

Description

BACKGROUND OF THE INVENTION
• 1. Field of the Invention
• This invention relates generally to a system and method for providing security for one-way message transmissions and, more particularly, to a system and method for providing security for short message system messages, where the system and method use a synchronized clock signal that is added to the message.
• 2. Discussion of the Related Art
• Communications systems are known in the art that allow a central service center to communicate wirelessly with a vehicle to provide various services, such as unlocking the vehicle, updating the software in the various ECUs within the vehicle, etc. The central service center will include a server that allows it to wirelessly communicate with the vehicle over the designated frequencies through one or more of cellular based communications, land-lines, satellite communications and the internet.
• These types of wireless communications systems sometimes employ short message system (SMS) communications links where the messages are transmitted on a one-way channel with no return transmissions. In other words, there is no verification that the message is received. These types of SMS communications links are desirable because they reduce the amount of bandwidth and power required to provide the communications link. For example, in the vehicle communications system discussed above, a vehicle operator may call the service center to ask that the vehicle doors be unlocked. The service center may wireless communicate the command to unlock the door using an SMS message at low bandwidth and low cost.
• A potential security threat exists with this type of SMS communications link. Particularly, it is possible for a hacker to receive and record the transmitted message from the service center to the vehicle and/or prevent the message from the service center from reaching the vehicle. The hacker can then replay the message at a later time to perform a particular function. For example, if an SMS message is sent to unlock the vehicle doors, the hacker can block the message at the router level or in the air by jamming the signal. Because the captured message is a valid message, the hacker can replay the message at a later time when the vehicle owner is not close to the vehicle and gain unauthorized access to the vehicle.
SUMMARY OF THE INVENTION
• In accordance with the teachings of the present invention, a system and method are disclosed for providing secure one-way transmissions in a vehicle wireless communications system. The system and method rely on a clock signal to assure that the vehicle and server receive proper messages. The vehicle and the server will periodically synchronize their internal clocks with a global clock based on a certain algorithm. When the server wishes to transmit a message wirelessly to the vehicle, it will include its local clock signal in the body of the message with a vehicle identification number and a particular function code. The server will then encrypt the message and transmit it to the vehicle. The vehicle will decrypt the message and compare the transmitted vehicle identification number with its identification number. If the identification numbers match, the vehicle will then see if the time in the message is within a predefined window of the vehicles local clock time. If the transmitted time is within the predefined window of the vehicles time, the vehicle will accept the message and perform the function. Otherwise, the vehicle will reject the message as being an invalid or possibly replayed message. The time can also be used to validate a message transmitted from the vehicle to the server in the same manner.
• Additional features of the present invention will become apparent from the following description and appended claims taken in conjunction with the accompanying drawings.
BRIEF DESCRIPTION OF THE DRAWING
• FIG. 1 is a diagram of a vehicle and a service center using a one-way channel communications link; and
• FIG. 2 is a flow chart diagram showing an operation for providing security for one-way channel messages between a vehicle and a service center.
DETAILED DESCRIPTION OF THE EMBODIMENTS
• The following discussion of the embodiments of the invention directed to a system and method for providing security for a short message system in a wireless vehicle communications system is merely exemplary in nature, and is in no way intended to limit the invention or its applications or uses.
• FIG. 1 is a diagram of asystem10 providing wireless communications between avehicle12 and aservice center14 including aserver16. Thesystem10 shows a one-way SMS message18 transmitted by theserver16 to thevehicle12. Themessage18 is intended to be transmitted wirelessly by any suitable manner, including cellular communications links, satellite communications links, internet links, etc., as would be well understood to those skilled in the art. Thevehicle12 can also transmit an SMS message to theserver16. The discussion herein of thevehicle12 receiving transmitted messages from theserver16 is intended to represent any known communications system of this type, such as XM™ radio, Sirius™ radio, On-Star™, etc. The specific architecture and design of the communications system is not necessary for a proper understanding of the invention.
• As will be discussed in detail below, thevehicle12 and theserver16 receivesignals24 and26, respectively, from asatellite22 that include a clock signal of the current time. Thevehicle12 and theserver16 will periodically capture thesignals24 and26 to update their internal clocks to be synchronized to each other. Any suitable algorithm can be used to determine the time when thevehicle12 and theserver16 synchronize their
• internal clock to the global clock so that a potential hacker will not be able to determine that time. In one embodiment, thesignals24 and26 are GPS signals, but can be any other signal that includes the time that can be received by both thevehicle12 and theserver16, such as an atomic clock signal.
• FIG. 2 is a flow chart diagram30 showing a method, according to an embodiment of the present invention, for providing security for theSMS message18 to prevent a hacker from recording themessage18 being transmitted to thevehicle12, and later replaying themessage18 to cause the replayed message to perform the particular vehicle function, such as unlocking the vehicle doors. Thevehicle12 and theserver16 will periodically capture thesignals24 and26 to update their internal clocks and be synchronized to each other atbox32 according to any suitable algorithm. Because the potential hacker will not know the synchronization time, he will not be able to fraudulently cause thevehicle12 to update its internal clock.
• When theserver16 wishes to send themessage18 to thevehicle12, it will form a message atbox34 that includes its local time previously synchronized from thesignal26. Theserver16 will form the message by adding the local time to a message block including the desired vehicle identification number and the code for the particular function to be performed, such as unlocking the vehicle doors. Theserver16 will then encrypt the combined message atbox36 by any suitable encryption process, which would be well known to those skilled in the art. Theserver16 will then transmit themessage18 to thevehicle12 atbox38.
• Thevehicle12 will receive and decrypt themessage18 atbox40. Thevehicle12 will then compare its vehicle identification number to the transmitted identification number in themessage18 atbox42. If the two identification numbers do not match, then thevehicle12 does not perform the requested function atbox44. If the two identification numbers do match, thevehicle12 will then compare the current time of the vehicles local clock that has been previously synchronized to thesignal24 with the time encoded in the received message atbox46. If the two times are within a predefined time window, thevehicle12 accepts themessage18 and performs the function in themessage18 atbox48. If the two times are not within the predefined window, thevehicle12 rejects themessage18 at thebox44.
• The predefined window would be application specific for the particular system. Thevehicle12 may only be powered on to receive messages periodically, so that if it receives themessage18 during an off period, the predefined window must compensate for this discrepancy in time. Further, it will take some time for theserver16 to go through the process of encrypting and transmitting the message, and there will be some time delay from when the message is transmitted to when it is received and decrypted by thevehicle12.
• The foregoing discussion discloses and describes merely exemplary embodiments of the present invention. One skilled in the art will readily recognize from such discussion and from the accompanying drawings and claims that various changes, modifications and variations can be made therein without departing from the spirit and scope of the invention as defined in the following claims.

Claims (20)

1. A method for providing security for a communications signal transmitted from a server to a vehicle, said method comprising:

periodically receiving a global time signal by the vehicle and the server;

synchronizing a local time signal in the vehicle and the server to the global time signal;

adding a server local time signal to a message including a vehicle identification number and a function code in the server;

encrypting the message in the server;

transmitting the message from the server to the vehicle;

receiving the message in the vehicle;

decrypting the message in the vehicle;

comparing a vehicle identification number of the vehicle with the vehicle identification number in the message;

comparing the server local time signal in the message with a vehicle local time signal in the vehicle; and

performing a function associated with the function code if the vehicle identification numbers match and the server local time signal in the message is within a predefined window of the vehicle local time signal.

2. The method according toclaim 1 wherein the global time signal is provided by a GPS signal.

3. The method according toclaim 2 wherein the GPS signal is provided by a satellite.

4. The method according toclaim 1 wherein the transmitted message is a short message system message.

5. The method according toclaim 1 wherein the function is un-locking the vehicle doors.

6. The method according toclaim 1 wherein periodically receiving a global time signal by the vehicle and the server includes receiving the global time signal at a predetermined time defined by an algorithm.

7. A method for providing security for a short message communications signal transmitted between a server and a vehicle, said method comprising:

periodically receiving a global time signal by the vehicle and the server;

synchronizing a local time signal in the vehicle and the server to the global time signal;

adding the local time signal to a message;

transmitting the message between the server and the vehicle;

receiving the message by the vehicle or the server;

comparing the local time signal in the message with the local time signal in the vehicle or the server that received the message; and

performing a function if the local time signal in the message is within a predefined window of the local time signal in the vehicle or the server.

8. The method according toclaim 7 further comprising encrypting the message in the vehicle or the server and decrypting the corresponding message in the server or the vehicle.

9. The method according toclaim 7 wherein the global time signal is provided by a GPS signal.

10. The method according toclaim 7 wherein periodically receiving a global time signal by the vehicle and the server includes receiving the global time signal at a predetermined time defined by an algorithm.

11. A system for providing security for a communications signal transmitted from a server to a vehicle, said system comprising:

means for periodically receiving a global time signal by the vehicle and the server;

means for synchronizing a local time signal in the vehicle and the server to the global time signal;

means for adding a server local time signal to a message including a vehicle identification number and a function code in the server;

means for encrypting the message in the server;

means for transmitting the message from the server to the vehicle;

means for receiving the message in the vehicle;

means for decrypting the message in the vehicle;

means for comparing a vehicle identification number of the vehicle with the vehicle identification number in the message;

means for comparing the server local time signal in the message with a vehicle local time signal in the vehicle; and

means for performing a function associated with the function code if the vehicle identification numbers match and the server local time signal in the message is within a predefined window of the vehicle local time signal.

12. The system according toclaim 11 wherein the global time signal is provided by a GPS signal.

13. The system according toclaim 12 wherein the GPS signal is provided by a satellite.

14. The system according toclaim 11 wherein the transmitted message is a short message system message.

15. The system according toclaim 12 wherein the vehicle and the server receive the global time signal periodically based on an algorithm.

16. A wireless vehicle communication system comprising:

a vehicle receiving a global time signal, said vehicle synchronizing a vehicle local time signal to the global time signal; and

a server receiving the global time signal, said server synchronizing a server local time signal to the global time signal, said server or the vehicle adding the server or vehicle local time signal to a message including a function code, said server or vehicle transmitting the message, said vehicle or server comparing the local time signal in the message with the local time signal in the server or the vehicle that receives the message and said vehicle or server performing a function associated with the function code if the local time signal in the message is within a predefined window of the local time signal in the server or the vehicle.

17. The system according toclaim 16 wherein the server or the vehicle encrypts the message and the server or the vehicle decrypts the corresponding message.

18. The system according toclaim 16 wherein the global time signal is provided by a GPS signal.

19. The system according toclaim 18 wherein the GPS signal is provided by a satellite.

20. The system according toclaim 16 wherein the vehicle and the server receive the global time signal periodically as determined by an algorithm.

Images